🛡️ **SONICWALL SMA 1000 ZERO-DAYS ACTIVELY EXPLOITED — IMMEDIATE PATCHING REQUIRED**
Published Sunday, July 19, 2026 at 08:42 AM PT BLUF: SonicWall SMA 1000 appliances are under active attack via two unpatched zero-day vulnerabilities (CVE-2026-15409, CVE-2026-15410) that enable root-level access. Organizations running affected SMA models must patch immediately. Exploitation confirmed in the wild prior to vendor disclosure. DETAILS: Two zero-day vulnerabilities in SonicWall SMA 1000 appliances have been actively exploited by threat actors before SonicWall issued patches or public disclosure CVE-2026-15409 and CVE-2026-15410 confirmed as separate vulnerabilities; at least one enables administrative command execution and root access Attacks are confirmed active in operational environments; not theoretical or limited to proof-of-concept SonicWall has issued urgent patch guidance; specific patch versions and affected firmware builds not fully detailed in available reporting Scope of compromise unknown — number of organizations hit and attacker identity remain unconfirmed IMPACT: ...